You have configured an audit for all file operations for a defined user. What would be the BEST
way to EXCLUDE a specific operation on a specific machine?

A.
Browse all the events pertinent to the defined user

B.
Run a report on all operations on the machine but excluding the specific operation

C.
Create a media audit rule

D.
Use the filtering options in the Logs node

Explanation: